Skip to content
Snippets Groups Projects
ntp.conf 1.29 KiB
Newer Older
tinker panic 0
# ^^^^^^^This should be the first configuration item in the conf file!
# See "NTP Recommendations"
# https://kb.vmware.com/selfservice/viewdocument.do?cmd=displayKC&docType=kc&externalId=1006427
#
# Always reset the clock, even if the new time is more than 1000s away
# from the current system time.  We need this on VMs and it shouldn't hurt
# anywhere else.  

Adam Lewenberg's avatar
Adam Lewenberg committed
# This is the default site ntpd configuration file.  It queries the three
# stratum-one time servers, which use GPS receivers for accurate time.  It also
# queries SRCC's stratum-one time server, located in SRCF, which also uses GPS.
Adam Lewenberg's avatar
Adam Lewenberg committed

# Listen to the stratum 2 pool.
server time-a.stanford.edu iburst
server time-b.stanford.edu iburst
server time-c.stanford.edu iburst
server srcf-ntp.stanford.edu iburst
Adam Lewenberg's avatar
Adam Lewenberg committed

# Save the clock drift.
driftfile /var/lib/ntp/ntp.drift

# Only talk to the network where the time servers are.
Adam Lewenberg's avatar
Adam Lewenberg committed
restrict 171.64.7.0 mask 255.255.255.0 nomodify
restrict 171.66.97.64 mask 255.255.255.192 nomodify
Adam Lewenberg's avatar
Adam Lewenberg committed
restrict 204.63.224.64 mask 255.255.255.192 nomodify

# Allow all settings from our localhost interface.
restrict 127.0.0.1
restrict -6 ::1
Adam Lewenberg's avatar
Adam Lewenberg committed

# Do not allow access from anybody else
restrict default ignore
restrict -6 default ignore
# Disable the monlist command, since it can be used for a UDP DoS attack.
disable monitor